Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d5e3a6-adf0-4d99-baf2-30502e4a2d6b/1/zv7k58qPsoAdoH9RvRGjW_T5qYk.roa
File: zv7k58qPsoAdoH9RvRGjW_T5qYk.roa (raw, json)
Hash identifier: qFgE8p+4EILjfD9khovo2hvGwu6YNicZiJhX0Y1yey4=
Subject key identifier: CE:FE:E4:E7:CA:8F:B2:80:1D:A0:7F:51:BD:11:A3:5B:F4:F9:A9:89
Certificate issuer: /CN=5644f7c1a784d80d4605b2bd5a984029aedb0838
Certificate serial: 01882086B565939E56926FD85D849B3C2506
Authority key identifier: 56:44:F7:C1:A7:84:D8:0D:46:05:B2:BD:5A:98:40:29:AE:DB:08:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkT3waeE2A1GBbK9WphAKa7bCDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d5e3a6-adf0-4d99-baf2-30502e4a2d6b/1/zv7k58qPsoAdoH9RvRGjW_T5qYk.roa
Signing time: Mon 15 May 2023 17:47:59 +0000
ROA not before: Mon 15 May 2023 17:47:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 185.235.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b5:65:93:9e:56:92:6f:d8:5d:84:9b:3c:25:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5644f7c1a784d80d4605b2bd5a984029aedb0838
Validity
Not Before: May 15 17:47:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cefee4e7ca8fb2801da07f51bd11a35bf4f9a989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:fe:b4:89:78:1e:f2:a0:a1:ba:30:f3:d3:5f:
d7:90:61:82:b9:f4:d2:b3:18:0e:90:73:8c:e0:d8:
c3:b1:99:76:54:fc:87:61:d7:a4:83:e7:52:91:0e:
ef:21:97:48:50:0e:c1:6e:f5:db:57:76:62:52:b9:
09:b1:7d:2f:75:97:5f:4c:80:fd:e3:3e:7d:4b:5a:
c7:77:56:21:41:7b:7c:df:ad:2d:4e:81:f6:ee:13:
51:f9:4d:f1:22:c6:6d:bb:26:13:a9:da:47:fc:15:
cc:8d:c2:b9:67:91:3e:97:1c:16:92:69:35:be:f5:
04:42:ba:61:43:59:ba:5b:ff:c9:cf:76:41:b4:8b:
59:94:d0:e8:3a:18:b8:40:d1:47:a7:62:eb:27:2f:
69:c5:81:38:c9:ab:bc:71:88:73:b2:61:92:07:4c:
04:c7:f1:a1:bd:74:d7:33:30:63:d4:3d:12:e4:ac:
ea:aa:71:33:2c:dd:cf:20:b6:f8:22:55:d6:d5:91:
3a:de:18:9d:2b:3b:32:2f:4f:88:44:62:f8:03:fd:
40:a1:41:40:c9:64:cd:90:53:de:39:c7:cb:f2:85:
43:de:11:9c:eb:4f:d2:3e:8a:72:4a:93:ee:fb:0f:
00:76:16:8d:85:91:3a:35:65:82:5c:e4:87:51:10:
83:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FE:E4:E7:CA:8F:B2:80:1D:A0:7F:51:BD:11:A3:5B:F4:F9:A9:89
X509v3 Authority Key Identifier:
keyid:56:44:F7:C1:A7:84:D8:0D:46:05:B2:BD:5A:98:40:29:AE:DB:08:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkT3waeE2A1GBbK9WphAKa7bCDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d5e3a6-adf0-4d99-baf2-30502e4a2d6b/1/zv7k58qPsoAdoH9RvRGjW_T5qYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d5e3a6-adf0-4d99-baf2-30502e4a2d6b/1/VkT3waeE2A1GBbK9WphAKa7bCDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.228.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:06:a6:27:1b:5c:d5:53:e1:f0:ba:af:d3:94:fb:98:9e:88:
39:e2:16:16:1b:dc:76:47:ee:dc:34:08:c4:ba:b0:fc:3b:41:
7f:0e:a2:3d:c1:c9:a0:d1:95:8d:0e:7d:8c:c6:53:a9:f2:be:
43:c7:d0:b7:ec:1d:a4:22:56:44:34:c6:c1:7f:5d:72:46:44:
34:b5:b3:ba:d6:c4:b2:25:ee:39:02:84:69:1c:b8:71:d2:72:
c5:8b:98:88:f5:fe:73:04:d4:d4:fe:72:59:95:87:6e:1d:df:
1e:c7:8f:c8:11:3c:89:f2:ff:aa:7c:2e:8a:ad:a6:19:dd:06:
a0:6a:28:5c:78:1f:82:75:52:ef:eb:4d:c7:ac:bc:05:31:a3:
93:7f:70:f7:7e:0a:0a:e2:94:d9:54:c6:36:9a:d8:10:dc:d1:
ec:81:f7:b1:74:c6:8c:63:6d:de:95:6e:28:bc:36:fa:e1:21:
29:67:1a:c9:45:bd:71:87:4f:0d:34:56:1b:6b:1d:05:b1:a3:
94:2b:8c:c3:45:7e:46:8e:51:9c:b1:f1:d8:90:26:af:cc:41:
9f:b2:e3:6c:90:a9:ef:7e:3c:12:48:fc:38:82:9f:4e:60:5b:
40:d4:da:ad:b1:e1:94:e8:a7:a2:1a:04:bc:82:8e:b8:07:ce:
ee:25:f8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 1 13:51:51 2023 by rpki-client on console-fra.rpki-client.org